huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 45.115.26.30 Vietnam · Contrust Solutions S.R.L. | exposed-secret exploit malware mozi | LOG, PY, SH, TXT | 1,395 | 2026-10-26 |
| 124.77.222.157 China · China Telecom (Group) | malware mozi elf-binary | A | 1 | 2026-10-25 |
| 95.216.224.44 Finland · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-25 |
| 218.38.52.211 South Korea · SK Broadband Co Ltd | exposed-secret malware mozi elf-binary | PHP, ZIP, TXT, ELF | 30 | 2026-10-25 |
| 182.114.197.218 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-25 | |
| 82.156.186.185 China · Shenzhen Tencent Computer Systems Company Limited | malware cobalt-strike c2 mozi | PY, JAR, TXT, LOG | 88 | 2026-10-25 |
| 2.29.112.91 Finland · Hetzner Online GmbH | malware mozi | ZIP, CSV, JSON, LOG | 9 | 2026-10-25 |
| 193.36.119.24 The Netherlands · EstNOC OU | exposed-secret malware mozi pe-binary | LOG, VBS, PY, ELF | 21 | 2026-10-25 |
| 47.109.23.77 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware cobalt-strike exploit exposed-secret | BIN, LOG, PHP, PY | 21 | 2026-10-25 |
| 111.231.116.164 China · Shenzhen Tencent Computer Systems Company Limited | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-25 |
| 156.245.146.226 Seychelles · Zillion Network Inc. | exposed-secret malware mozi exploit | SH, HTML, PY, TXT | 561 | 2026-10-25 |
| 129.159.135.190 Israel · Oracle Corporation | malware exploit exposed-secret mozi | ELF, LOG, PY, C | 40 | 2026-10-25 |
| 192.236.229.229 United States · HostPapa | malware mozi exposed-secret exploit | PY, SH, LOG, TXT | 33 | 2026-10-25 |
| 8.133.234.121 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | SH, LOG, C, TXT | 216 | 2026-10-25 |
| 51.159.184.76 France · Scaleway SAS | exposed-secret malware mozi exploit | JSON, JS, TXT, HTML | 38 | 2026-10-25 |
| 64.226.89.20 Germany · DigitalOcean, LLC | exploit exposed-secret malware mozi | PY, TXT, CSV, JS | 14 | 2026-10-25 |
| 209.38.235.232 Germany · DigitalOcean, LLC | exposed-secret malware mozi exploit | JSON, JS, LOG, MD | 118 | 2026-10-25 |
| 175.159.194.157 Hong Kong · The Hong Kong Polytechnic University | exposed-secret exploit malware mozi | MD, SAMPLE, TXT, SH | 67 | 2026-10-25 |
| 45.67.86.32 Japan · Host Universal Pty Ltd | exploit malware exposed-secret mozi | LOG, PY, MACHO, TXT | 83 | 2026-10-25 |
| 115.29.202.62 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware exploit exposed-secret mozi | ELF, LOG, PY, MD | 139 | 2026-10-25 |
| 74.73.65.132 United States · Charter Communications Inc | exposed-secret malware mozi exploit | PY, TXT, MD, CSV | 81 | 2026-10-25 |
| 121.4.83.178 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret c2 webshell malware | MD, GITIGN | 19 | 2026-10-25 |
| 119.45.236.76 China · Shenzhen Tencent Computer Systems Company Limited | malware exploit c2 meterpreter | LOG, PE, BIN, ELF | 26 | 2026-10-24 |
| 198.46.158.18 United States · HostPapa | exposed-secret exploit malware mozi | PY, YAML, HTML, TXT | 362 | 2026-10-24 |
| 193.233.220.65 Russia · Aeza Group LLC | malware exploit c2 exposed-secret | PS1, PE, BAT, ZIP | 186 | 2026-10-24 |
| 58.221.60.160 China · Chinanet | malware exploit mozi c2 | MACHO, JAVA, PY, SH | 35 | 2026-10-24 |
| 39.109.100.126 Hong Kong | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 103.214.172.114 Hong Kong · Cloudie Limited | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 139.162.97.181 Japan · Akamai Technologies, Inc. | malware mozi exposed-secret gafgyt | MICROH, TXT | 53 | 2026-10-24 |
| 204.168.225.59 Finland · Hetzner Online GmbH | exposed-secret malware mozi exploit | PEM, TXT, PY, SH | 487 | 2026-10-24 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 194.11.226.41 United Kingdom · ROCKHOSTER PRIVATE LIMITED | exposed-secret malware mozi exploit | PY, TXT, LOG, JS | 106 | 2026-10-24 |
| 112.229.244.155 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-24 |
| 118.232.137.101 Taiwan · kbro CO. Ltd. | malware mozi elf-binary | A | 1 | 2026-10-24 |
| 187.110.176.65 Brazil · MHNET TELECOM | malware exposed-secret mozi exploit | LOG, PE, ZIP, TXT | 480 | 2026-10-24 |
| 151.242.30.142 South Africa · Internet Magnate (Pty) Ltd | exploit malware mozi exposed-secret | JS, ZIP, C, PY | 454 | 2026-10-23 |
| 104.21.52.227 United States · Cloudflare, Inc. | malware mozi | STORE | 1 | 2026-10-23 |
| 82.180.145.166 India · Contabo Asia Private Limited | webshell exposed-secret exploit malware | PHP, TXT, PY, JSP | 50 | 2026-10-23 |
| 202.61.139.15 Singapore · CTG Server Limited | exposed-secret exploit malware mozi | LOG, PY, JSON, PHP | 262 | 2026-10-23 |
| 52.188.156.253 United States · Microsoft Corporation | malware exploit mozi pe-binary | PE, PS1, COM | 7 | 2026-10-23 |
| 113.229.109.233 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-23 |
| 159.203.115.164 United States · DigitalOcean, LLC | exposed-secret c2 webshell malware | PY, SH, JS, TS | 459 | 2026-10-22 |
| 165.232.41.141 United Kingdom · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, GZ, JSON | 30 | 2026-10-22 |
| 54.169.109.7 Singapore · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, PY, OVPN, TXT | 55 | 2026-10-22 |
| 212.232.23.75 Singapore · ROCKHOSTER PRIVATE LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, BIN | 341 | 2026-10-21 |
| 75.1.240.64 United States · AT&T Enterprises, LLC | malware mozi elf-binary | A | 1 | 2026-10-21 |
| 91.214.17.136 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 91.214.17.151 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 195.201.83.167 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | SH, PY, SCIENC, JSON | 400 | 2026-10-21 |
| 212.244.203.102 Poland · Orange Polska Spolka Akcyjna | webshell exposed-secret malware c2 | C, SQL, IN, PL | 300 | 2026-10-21 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free